CVE-2025-1929

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-1929", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2025-03-04T12:29:12.096Z", "datePublished": "2025-08-15T12:06:43.436Z", "dateUpdated": "2026-06-06T06:23:49.410Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-06-06T06:23:49.410Z"}, "title": "SQLi in RiskTurk's Treasury Management Software", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}, {"descriptions": [{"lang": "en", "value": "CAPEC - 7 - Blind SQL Injection"}]}], "affected": [{"vendor": "Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti.", "product": "Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0.0.4", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.\n\nThis issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.<p>This issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4.</p>"}]}], "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-25-0198", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0198", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "Ertu\u011frul KUZGUN", "type": "finder"}], "source": {"defect": ["TR-25-0198"], "advisory": "TR-25-0198", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-08-15T12:54:48.282703Z", "id": "CVE-2025-1929", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-15T12:57:31.198Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1929", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-08-15T12:54:48.282703Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-15T12:54:52.511Z"}}], "cna": {"title": "SQLi in RiskTurk's Treasury Management Software", "source": {"defect": ["TR-25-0198"], "advisory": "TR-25-0198", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Ertu\u011frul KUZGUN"}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}, {"descriptions": [{"lang": "en", "value": "CAPEC - 7 - Blind SQL Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti.", "product": "Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.0.0.4"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-25-0198", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0198", "tags": ["government-resource"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.\n\nThis issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4.", "supportingMedia": [{"type": "text/html", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.<p>This issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-06-06T06:23:49.410Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1929", "state": "PUBLISHED", "dateUpdated": "2026-06-06T06:23:49.410Z", "dateReserved": "2025-03-04T12:29:12.096Z", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "datePublished": "2025-08-15T12:06:43.436Z", "assignerShortName": "TR-CERT"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131", "vendor": "Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti.", "versions": [{"lessThanOrEqual": "1.0.0.4", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "iletisim@usom.gov.tr"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.\n\nThis issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4."}, {"lang": "es", "value": "Neutralizaci\u00f3n inadecuada de elementos especiales utilizados en una vulnerabilidad de comando SQL (\"inyecci\u00f3n SQL\") en Risk Yaz?l?m Teknolojileri Ltd. ?ti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz?l?m? permite la inyecci\u00f3n SQL, CAPEC - 7 - Inyecci\u00f3n SQL ciega. Este problema afecta a Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz?l?m?: hasta 1.0.0.4."}], "id": "CVE-2025-1929", "lastModified": "2026-06-17T08:40:21.790", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "iletisim@usom.gov.tr", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-1929", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-08-15T12:54:48.282703Z", "version": "2.0.3"}}]}, "published": "2025-08-15T12:15:25.203", "references": [{"source": "iletisim@usom.gov.tr", "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0198"}, {"source": "iletisim@usom.gov.tr", "url": "https://www.usom.gov.tr/bildirim/tr-25-0198"}], "sourceIdentifier": "iletisim@usom.gov.tr", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "iletisim@usom.gov.tr", "type": "Secondary"}]}

{}

{}